CVE-2025-52081

In Netgear XR300 V1.0.3.3810.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usbdevice.cgi endpoint. The vulnerability occurs when processing POST requests containing the usbfolder parameter...

CVE-2025-53101 ImageMagick has Stack Buffer Overflow in image.c

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's magick mogrify command, specifying multiple consecutive %d format specifiers in a filename template causes internal pointer arithmetic to...

CVE-2025-53101

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's magick mogrify command, specifying multiple consecutive %d format specifiers in a filename template causes internal pointer arithmetic to...

CVE-2025-7597

CVE-2025-7597 affects Tenda AX1803 (firmware 1.0.0.1). The vulnerability is a stack-based buffer overflow in the formSetMacFilterCfg function (file /goform/setMacFilterCfg) triggered by manipulating the deviceList argument. It is exploitable remotely, and public exploit material exists. Affected ...

PT-2025-29508

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-0 and 6.9.13-26 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. A stack buffer overflow vulnerability exists in the magick mogrify command when...

CVE-2025-7532 Tenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow

A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. This vulnerability affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated...

CVE-2025-7532 Tenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow

A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. This vulnerability affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated...

CVE-2025-7527 Tenda FH1202 AdvSetWan fromAdvSetWan stack-based overflow

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been rated as critical. This issue affects the function fromAdvSetWan of the file /goform/AdvSetWan. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

CVE-2025-38320 arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()

In the Linux kernel, the following vulnerability has been resolved: arm64/ptrace: Fix stack-out-of-bounds read in regsgetkernelstacknth KASAN reports a stack-out-of-bounds read in regsgetkernelstacknth. Call Trace: 97.283505 BUG: KASAN: stack-out-of-bounds in regsgetkernelstacknth+0xa8/0xc8...

EulerOS 2.0 SP10 : expat (EulerOS-SA-2025-1795)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an...

EulerOS 2.0 SP10 : expat (EulerOS-SA-2025-1772)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an...

CVE-2025-7087

A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the function formL2TPSetup of the file /goform/formL2TPSetup of the component webs. The manipulation of the argument L2TPUserName leads to stack-based buffer overflow. The attack can be...

CVE-2025-5472 Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index

The JSONReader in run-llama/llamaindex versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service DoS by submitting deeply nested JSON structures, leading to a RecursionError and crashing...

CVE-2024-25178

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...

PT-2025-28210

Name of the Vulnerable Software and Affected Versions: LuaJIT versions 2.1 and earlier Description: The issue is related to a stack-buffer-overflow in the lj strfmt wfnum function located in lj strfmt num.c. This overflow can potentially lead to exploitation. No information is provided about the...

PT-2025-28104 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a risk of stack overflow when vector images are parsed during file preview. Successful exploitation of this vulnerability may affect the file preview function...

EulerOS 2.0 SP13 : expat (EulerOS-SA-2025-1686)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an...

CVE-2025-6857

CVE-2025-6857 affects HDF5 1.14.6; the vulnerability is in H5G__node_cmp3 (src/H5Gnode.c) causing a stack-based buffer overflow. Exploitation is local and the exploit has been disclosed publicly. Connected advisories indicate a patched version is available (HDF5 1.14.6-1).

D-Link DIR-619L formSetDomainFilter Stack Overflow Vulnerability

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. A stack overflow vulnerability exists in the D-Link DIR-619L /goform/formSetDomainFilter, which originates from...

CVE-2025-6374

D-Link DIR-619L (firmware 2.06B01) contains a stack-based buffer overflow in the formSetACLFilter function (/goform/formSetACLFilter) caused by unsafely handling the curTime argument. This remote vulnerability could allow an attacker to exploit the overflow and potentially take control or crash t...